CVE-2025-30199

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station...

PT-2025-36259

Name of the Vulnerable Software and Affected Versions: ECOVACS vacuum robot base stations affected versions not specified Description: ECOVACS vacuum robot base stations do not validate firmware updates, allowing malicious over-the-air updates to be sent to the base station via an insecure...

CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added two security flaws impacting TP-Link wireless routers to its Known Exploited Vulnerabilities KEV catalog, noting that there is evidence of them being exploited in the wild. The vulnerabilities in question are listed...

CVE-2025-4371

A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection...

CVE-2025-4371

CVE-2025-4371 affects Lenovo 510 FHD and Lenovo Performance FHD webcams. The issue arises from the devices’ firmware validation gap, which could let an attacker with physical access write arbitrary firmware updates over USB, enabling BadUSB-style control and potential persistence. The linked PT-2...

CVE-2025-4371

A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection...

Lenovo 510 FHD和Lenovo Performance FHD 安全漏洞

Lenovo 510 FHD and Lenovo Performance FHD are both HD cameras from Lenovo China. A security vulnerability exists in the Lenovo 510 FHD and Lenovo Performance FHD that stems from a physical access that could lead to arbitrary firmware updates...

2025.3 IPU, Intel®  Xeon® Processor Firmware Advisory

Summary: Potential security vulnerabilities in the Intel® Xeon® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20053 Description: Improper buffer restriction...

2025.3 IPU, Intel® TDX Module Advisory

Summary: Potential security vulnerabilities in the Intel® TDX firmware may allow information disclosure or escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20613 Description: Predictable Seed in...

Tenda AC15 数据伪造问题漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...

2025.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services Intel® SPS, Intel® Active Management Technology AMT, and Intel® Standard Manageability may allow information disclosure or escalation of privilege. Intel is...

CVE-2025-53520

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

CVE-2025-53520 EG4 Electronics EG4 Inverters Download of Code Without Integrity Check

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

CVE-2025-53520 EG4 Electronics EG4 Inverters Download of Code Without Integrity Check

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

PT-2025-32369 · Eg4 · Eg4

Name of the Vulnerable Software and Affected Versions: EG4 affected versions not specified Description: The affected product allows firmware updates to be downloaded from EG4’s website, transferred via USB dongles, or installed through EG4’s Monitoring Center remote, cloud-connected interface or...

Infineon TPM Reference Implementation Out-of-Bounds Read

Infineon has informed HP of a potential security vulnerability in reference code for TPM models used in certain HP PC products, which might allow information disclosure or denial of service of the TPM. Infineon is releasing firmware updates to mitigate the vulnerability. HP has identified affecte...

Fedora 42 : linux-firmware (2025-6b6824140a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6b6824140a advisory. Update to 20250708: Drop incorrect nvidia ghost entries xe: Add fancontrol v203.0.0.0 for BMG Update AMD cpu microcode amdgpu: Add DCN 3.6/PSP 14.0.5/SDMA...

AMD Transient Scheduler BIOS Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD processors, which might allow loss of confidentiality. AMD is providing Platform Initialization PI firmware updates to mitigate this vulnerability. AMD has released updates to mitigate this potential vulnerabilities. HP has...

HPESBHF04866 rev.1 - HPE Superdome Flex and Flex 280 Servers Using Certain Intel Processor BIOS, INTEL-SA-01153, 2025.1 IPU, Intel Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v2.00.12 HPE Superdome Flex Server - Prior to v4.10.18 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF04868 rev.1 - HPE Superdome Flex, Flex 280 and Compute Scale-up Server 3200 Platform Servers Using Intel Processor BIOS, INTEL-SA-01247, 2025.2 IPU - Intel Processor Indirect Branch Predictor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.60.88 HPE Superdome Flex 280 Server - Prior to v2.00.12 HPE Superdome Flex Server - Prior to v4.10.18 CVSS Scores: | CVE | CVS...